CLAIMS 

\l. Method for signing an object comprising the steps of: 

taRmg a snapshot of the object; 
associating a signature with said snapshot; 
maintaining said association between said snapshot and said 
signature. \ 

2. The m^hod of claim 1 further comprising the steps of: 
verifying said signature; 

constructing a new object using said snapshot, when said signature is 
verified. \ 

3. The method of clainkl further comprising the steps of: 

storing said snapshot in another object; 
storing said signature in said another object. 

4. The method of claim 1 further Comprising the steps of: 
monitoring the status of said snapshot; \ 

invalidating said signature when the status o^said snapshot changes. 

5. The method of claim 1 further comprising the step of creating 
said signature using said snapshot. \ 
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\6. The method of claim 5 further comprising the step of 
associating a second signature with said snapshot. 

7. \ The method of claim 6 further comprising the steps of: 
verifying said second signature; 

constructing a new object using said snapshot, when said second 
signature is verified. 

8. Method Ibr sealing an object comprising the steps of: 

generating an encVption key; 
taking. a snapshot onthe object; 
generating an encrypted snapshot; 
deleting said snapshot. \ 

9. The method of claimV further comprising the step of 
associating a, signature with said snapshot. 

10. The method of claim 9 further comprising the steps of: 
verifying said signature; \ 

constructing a new object using said snapshot, when said signature is 
verified. \ 
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\j An article of manufacturing comprising: 

a computer usable medium having computer readable program code 
embodied thWein for signing an object comprising: 

computeXreadable program code configured to cause a computer to 
take a snapshot oi\the object; 

computer readable program code configured to cause a computer to 
associate a signature wkh said snapshot; 

computer readableWogram code configured to cause a computer to 
maintain said association between said snapshot and said signature. 

12. The article of manufacture of claim 11 further comprising: 

computer readable program ds>de configured to cause a computer to 
verify said signature; \ 

computer readable program code configured to cause a computer to 
construct a new object using said snapshotWhen said signature is verified. 

13. The article of manufacture of claim 11 further comprising: 

computer readable program code configured, to cause a computer to 
store said snapshot in another object; \ 

computer readable program code configured to Cause a computer to 
store said signature in said another object. \ 
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* \^ The article of manufacture of claim 11 further comprising: 

computer readable program code configured to cause a computer to 
monitor the sfetus of said snapshot; 

computer readable program code configured to cause a computer to 
5 invalidate said signature when the status of said snapshot changes. 

15. The article of manufacture of claim 11 further comprising 
computer readable program code configured to cause a computer to create 
said signature using sai^ snapshot. 

16. The article ofVnanufacture of claim 11 further comprising 
10 computer readable program code configured to cause a computer to associate 

a second signature with said snapshot 

17. The article of manufacture of claim 16 further comprising: 
computer readable program code configured to cause a computer to 

verify said second signature; 
15 computer readable program code Configured to cause a computer to 

construct a new object using said snapshot^when said second signature is 
verified. 

18 An article of manufacturing comprising: 

a computer usable medium having computeryreadable program code 
20 embodied therein for sealing an object comprising: 
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computer readable program code configured to cause a computer to 
generate ah encryption key; 

computer readable program code configured to cause a computer to 
take a snapshot\>f the object; 

computer readable program code configured to cause a computer to 
encrypt said snapshot 

computer readable program code configured to cause a computer to 
delete said snapshot. \ 

19. The article of manufacture of claim 18 further comprising 
computer readable program code^configured to cause a computer to decrypt . 
said encrypted snapshot. \ 

20. The article of manufactured claim 18 further comprising 
computer readable program code configured to cause a computer to associate 
a signature with said snapshot. \ 

21. The article of manufacture of claim\20 further comprising: 

computer readable program code configured to cause a computer to 
verify said signature; and \ 

computer readable program code configured to cause a computer to 
construct a new object using said snapshot, when said signature is verified. 
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\22. A system configured to sign an object comprising: 

a firat module of program code executing on a computer configured to 
take a snapshot of an object; 

a second Viodule of program code executing on said computer 
configured to generate a signature using said snapshot; 

said first module configured to monitor the status of said snapshot, 
and to invalidate said signature when said snapshot is changed. 

23. The system of\laim 22 wherein said first and second modules 
are implemented as a second object. 

24. The system of claim ^3 wherein said snapshot and said 
signature are stored in said second object, said second object limiting access 
to said snapshot through one or more methods of said second object. 

25. The system of claim 24 whereik said one or more methods of 
said second object invalidate said signature wnen said access modifies said 
snapshot. \ 

26. The system of claim 22 further comprising a sealing module 
comprising: \ 

a key generation module configured to generate an eimyption key; 
an encryption module configured to generate an encrypted snapshot 
from said snapshot; \ 
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deletion module configured to delete said snapshot. 

27. Tfi^&YStem of claim 26 wherein said second object is configured 
to invoke said key gen^tion module, said encryption module and said 
deletion module. 




28. The system of claim 27 wFfe^in said second object is configured 
to verify said signature and construct and nev^qbject using said snapshot 
when said signature is verified. 
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